be sure to create ALLOWNET and ALLOWSRV chains first